← Database

CVE-2008-2652

HIGH CVSS: 7.5 Published: 2008-06-10 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the (1) idp and (2) category parameters.

Affected Platforms

Smeweb Smeweb

Weakness Type

CWE-89

References